IN THE CLAIMS 

Please amend the claims as follows: 

1. (currently amended) A method comprising the steps of: 

monitoring access points through which data can be exchanged with a network; 
identifying an unauthorized access point^-aiid 

in response to an unauthorized access point being identified, determining make, 
model and default configuration password of said identified unauthorized access point by 
monitoring traffic passing through the said identified unauthorized access point; 

addressing said identified unauthorized access point using said determined default 
configuration password; and 

after gaining access thereto, reconfiguring said unauthorized access point to add 
an identity of said identified unauthorized access point to registers of ports for which 
charges are allocated such that access charges can be accumulated against said identity , 

2. (currently amended) A The method according to Claim l a further comprising the step of 
determining fee a geographical location of the said identified unauthorized access point. 

3. (currently amended) A The method according to one of Claims 1 and 2 4 further 
comprising the step of applying traffic filtering to monitored traffic passing through the said 
identified unauthorized access point. 

4. canceled 
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5. (currently amended) A The method according to one of Claims 1 through 4 3± further 
comprising the step of accumulating charges for access and usage of network resources identified 
to the said identified unauthorized access point. 

6. (currently amended) A The method according to one of Claims 1 through 5 a wherein the 
step of said identifying an unauthorized access point comprises further includes comparing the 
identity identities of monitored access points with a database of authorized access points. 

7. (currently amended) A The method according to Claim 6 a wherein the step of said 
monitoring comprises further includes equipping each of a plurality of computer devices to detect 
access points accessible to the said computer devices and to report to a server computer system 
th e identity identities of detected access points. 

8. (currently amended) A The method according to Claim 6 A wherein the stop of said 
monitoring compris e s further includes querying network nodes for recent entries into node 
identifying connectivity tables maintained at the said network nodes. 

9. (currently amended) A The method according to one of Claims 7 and 8,, wherein the step 
of said monitoring is performed intermittently and periodically. 

10. (currently amended) A The method according to Claim 9 a wherein the step of said 
monitoring is performed at predetermined regular intervals. 

11. (currently amended) A The method according to Claim 9 4 wherein the stop of said 
monitoring is performed at random irregular intervals. 

12. (currently amended) A The method according to Claim 2 a wherein th e step of said 
determining fee geographic location of an identified unauthorized access point comprises further 
includes comparing the locations of a plurality of computer devices all of which report detection 
of the said identified unauthorized access point. 
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13. (currently amended) A The method according to Claim 3,, wherein the step of said 
applying traffic filtering comprises further includes denying access to the said network through 
fee said identified unauthorized access point. 



14. (currently amended) An apparatus comprising: 
a computer system; 

a network interface connected to said computer system and providing to provide 
a communication channel between said computer system and a network; and 

program instructions stored accessibly to said computer system and cooperating 
with said computer system when executing on said computer system to means for 
monitoring access points through which data can be exchanged with said networ k, assist 
in identifying an unauthorized access point, and monitor traffic passing through an 
identified unauthorized access point; 

means for identifying an unauthorized access point; 

means for, in response to an unauthorized access point being identified, 
determining make, model and default configuration password of said identified 
unauthorized access point by monitoring traffic passing through said identified 
unauthorized access point; 

means for addressing said identified unauthorized access point using said 
determined default configuration password; and 

means for, after gaining access thereto, reconfiguring said unauthorized access 
point to add an identity of said identified unauthorized access point to registers of ports 
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for which charges are allocated such that access charges can be accumulated against said 



identity . 



1 5 . (currently amended) The Aapparatus according to Claim 1 4 A wherein said computer system 
is a workstation computer system and further wherein said program instructions include an access 
point identification program cooperating therewith when executing on said system to identify 
access points accessible through said interface; and a reporting program cooperating with said 
identification program and with said system when executing on said system to report through said 
interface to a remote server computer system the identity of accessed points . 

1 6 . (currently amended) The Aapparatus according to Claim 1 4 a wherein said computer system 
is a server computer system and further wherein said program instruction include a node 
identification database cooperating therewith when said program is executing on said system to 
identify unauthorized access points accessible to said system through said interface . 

17. (currently amended) The Aapparatus according to one of Claims 15 and 16 a aad further 
comprising a geographical location determining program effective when executing to derive fee 
said physical location of an unauthorized access point. 

18. (currently amended) The Aapparatus according to one of Claims 15 through 17 x a^d 
further comprising a traffic filter controlling program effective when executing to selectively 
impose a filter on traffic exchanged with the said network through an unauthorized node. 

19. canceled 

20. (currently amended) The Aapparatus according to one of Claims 15 through i9 18, mA 
further comprising an accounting control program effective when executing to accumulate charges 
for access and usage of network resources identified to fete said identified unauthorized access 
point. 
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21. (currently amended) A computer storage medium having a computer program product 
comprising: 

a computer readable medium; and 

program instructions stored on said medium accessibly to a computer system and 
effective when executing on a system to: 

computer program code for monitoring access points through which data can be 
exchanged with a network; 

computer program code for identifying an unauthorized access point y and 

computer program code for, in response to an unauthorized access point being 
identified, determining make, model and default configuration password of said identified 
unauthorized access point by monitoring traffic passing through the said identified 
unauthorized access point; 

computer program code for addressing said identified unauthorized access point 
using said determined default configuration password; and 

computer program code for, after gaining access thereto, reconfiguring said 
unauthorized access point to add an identity of said identified unauthorized access point 
to registers of ports for which charges are allocated such that access charges can be 
accumulated against said identity . 

22. (currently amended) The computer storage medium A program product according to Claim 
21 4 wherein said computer storage medium the program instructions further comprise instructions 
effective to determine the includes computer program code for determining a geographical 
location of the said identified unauthorized access point. 
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23. (currently amended) The computer storage medium A program product according to one 
of Claims 21 and 22 A wherein the program instructions said computer storage medium further 
comprise instructions effective to includes computer program code for applying traffic filtering 
to monitored traffic passing through fee said identified unauthorized access point. 

24. canceled 

25. (currently amended) The computer storage medium A program product according to one 
of Claims 21 through 24 23^ wherein the program instructions said computer storage medium 
further comprise instructions effective to accumulate includes computer program code for 
accumulating charges for access and usage of network resources identified to the said identified 
unauthorized access point. 

26. (currently amended) The computer storage medium A program product according to one 
of Claims 21 through 25 A wherein th e program instructions said computer storage medium further 
comprise instructions e ffective to compare the includes computer program code for comparing 
identity of monitored access points with a database of authorized access points. 
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